{"action":"Upgrade github.com/rancher/norman to 0.0.0-20240207153100-3bb70b772b52 or later.","affected":[{"introduced":"0"}],"component":"github.com/rancher/norman","cve_ids":["CVE-2023-32193"],"ecosystem":"Go","epss":0.00467,"exploited":false,"fixed_versions":["0.0.0-20240207153100-3bb70b772b52"],"ghsa_id":"GHSA-r8f4-hv23-6qp6","id":"tcs_01M5KG1BX0CHJYZH7VT3QEQP7P","modified_at":"2026-02-04T04:35:47.223360Z","published_at":"2024-02-20T17:50:57Z","references":["https://osv.dev/vulnerability/GO-2024-2536","https://github.com/rancher/norman/security/advisories/GHSA-r8f4-hv23-6qp6","https://github.com/rancher/norman/commit/3bb70b772b52297feac64f5fdeb1b13c06c37e39","https://github.com/rancher/norman/commit/7b2b467995e6dfab6d4a5dee8dffc15033ae8269","https://github.com/rancher/norman/commit/a6a6cf5696088c32002953d36b75bdcc84f2399e","https://github.com/rancher/norman/commit/bd13c653293b9b5e0b37e8a6ccd1c3277f4623ed","https://github.com/rancher/norman/commit/cb54924f25c7666511a913cd41834299ef22dba4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2536","url":"https://osv.dev/vulnerability/GO-2024-2536"}],"summary":"Cross-site scripting in public API in github.com/rancher/norman"}